Date first seen Duration Proto Src IP Addr:Port Dst IP Addr:Port Packets Bytes Flows 2025-12-03 23:59:34.803 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:44688 10 6452 1 2025-12-04 00:00:35.212 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:35982 10 6452 1 2025-12-03 23:57:10.384 00:05:02.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-03 23:57:10.387 00:05:02.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 00:01:35.611 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:57536 10 6452 1 2025-12-04 00:01:48.716 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:01:48.643 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:01:48.575 00:00:00.024 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:01:48.633 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:01:48.806 00:00:00.023 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:02:35.983 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:51544 10 6452 1 2025-12-04 00:03:36.389 00:00:10.328 TCP 1.101.0.1:3000 -> 23.104.0.1:59434 10 6452 1 2025-12-04 00:04:36.748 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:41552 10 6452 1 2025-12-04 00:05:37.156 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37464 10 6452 1 2025-12-04 00:06:48.176 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:06:47.983 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:06:37.562 00:00:10.330 TCP 1.101.0.1:3000 -> 23.104.0.1:46370 10 6452 1 2025-12-04 00:06:47.990 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:06:48.095 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:06:48.148 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:03:10.386 00:05:02.194 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 00:03:10.389 00:05:02.188 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 00:07:37.933 00:00:10.375 TCP 1.101.0.1:3000 -> 23.104.0.1:60380 10 6452 1 2025-12-04 00:08:38.349 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:52440 10 6452 1 2025-12-04 00:09:38.754 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:34276 10 6452 1 2025-12-04 00:10:39.156 00:00:10.357 TCP 1.101.0.1:3000 -> 23.104.0.1:52888 10 6452 1 2025-12-04 00:11:48.357 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:11:39.552 00:00:10.942 TCP 1.101.0.1:3000 -> 23.104.0.1:44664 10 6452 1 2025-12-04 00:11:48.226 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:11:48.069 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:11:48.275 00:00:00.021 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:11:48.233 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:12:40.528 00:00:10.400 TCP 1.101.0.1:3000 -> 23.104.0.1:38966 12 10375 1 2025-12-04 00:09:10.417 00:05:02.161 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 00:09:10.414 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 00:13:40.966 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:47340 10 6452 1 2025-12-04 00:14:41.373 00:00:10.329 TCP 1.101.0.1:3000 -> 23.104.0.1:51570 10 6452 1 2025-12-04 00:15:41.743 00:00:10.327 TCP 1.101.0.1:3000 -> 23.104.0.1:34782 10 6452 1 2025-12-04 00:16:48.361 00:00:00.021 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:16:48.345 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:16:48.235 00:00:00.023 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:16:48.368 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:16:48.317 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:16:42.117 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:44420 10 6452 1 2025-12-04 00:17:42.521 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:46186 10 6452 1 2025-12-04 00:18:42.891 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:50986 12 6556 1 2025-12-04 00:15:10.419 00:05:02.162 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 00:15:10.416 00:05:02.167 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 00:19:43.318 00:00:10.326 TCP 1.101.0.1:3000 -> 23.104.0.1:36092 10 6452 1 2025-12-04 00:20:43.690 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50202 10 6452 1 2025-12-04 00:21:48.699 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:21:48.464 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:21:48.557 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:21:48.616 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:21:48.466 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:21:44.107 00:00:10.325 TCP 1.101.0.1:3000 -> 23.104.0.1:57526 10 6452 1 2025-12-04 00:22:44.472 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:54334 10 6452 1 2025-12-04 00:23:44.891 00:00:10.385 TCP 1.101.0.1:3000 -> 23.104.0.1:34852 10 6452 1 2025-12-04 00:24:45.327 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:58836 10 6452 1 2025-12-04 00:21:10.420 00:05:02.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 00:21:10.424 00:05:02.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 00:25:45.730 00:00:10.370 TCP 1.101.0.1:3000 -> 23.104.0.1:50126 10 6452 1 2025-12-04 00:26:48.586 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:26:48.374 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:26:48.595 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:26:48.442 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:26:48.677 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:26:46.141 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:55594 10 6452 1 2025-12-04 00:27:46.545 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:35226 10 6452 1 2025-12-04 00:28:46.944 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:57680 10 6452 1 2025-12-04 00:29:47.362 00:00:10.361 TCP 1.101.0.1:3000 -> 23.104.0.1:47210 10 6452 1 2025-12-04 00:30:47.763 00:00:10.374 TCP 1.101.0.1:3000 -> 23.104.0.1:33690 10 6452 1 2025-12-04 00:27:10.422 00:05:02.166 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 00:27:10.424 00:05:02.160 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 00:31:48.533 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:31:48.392 00:00:00.021 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:31:48.307 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:31:48.534 00:00:00.024 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:31:48.390 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:31:48.176 00:00:10.323 TCP 1.101.0.1:3000 -> 23.104.0.1:52836 10 6452 1 2025-12-04 00:32:48.538 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:57760 10 6452 1 2025-12-04 00:33:48.940 00:00:10.340 TCP 1.101.0.1:3000 -> 23.104.0.1:39356 10 6452 1 2025-12-04 00:34:49.318 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:45330 10 6452 1 2025-12-04 00:35:49.721 00:00:10.376 TCP 1.101.0.1:3000 -> 23.104.0.1:36010 10 6452 1 2025-12-04 00:36:48.931 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:36:48.957 00:00:00.025 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:36:48.933 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:36:48.548 00:00:00.023 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:36:49.014 00:00:00.021 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:36:50.136 00:00:10.324 TCP 1.101.0.1:3000 -> 23.104.0.1:43414 10 6452 1 2025-12-04 00:33:10.424 00:05:02.165 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 00:33:10.427 00:05:02.159 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 00:37:50.499 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:54282 10 6452 1 2025-12-04 00:38:50.906 00:00:10.334 TCP 1.101.0.1:3000 -> 23.104.0.1:33488 10 6452 1 2025-12-04 00:39:51.282 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:56980 10 6452 1 2025-12-04 00:40:51.688 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:50694 10 6452 1 2025-12-04 00:41:48.787 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:41:48.570 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:41:48.493 00:00:00.024 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:41:48.891 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:41:48.576 00:00:00.024 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:41:52.113 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:51916 10 6452 1 2025-12-04 00:42:52.516 00:00:10.408 TCP 1.101.0.1:3000 -> 23.104.0.1:49208 12 10369 1 2025-12-04 00:39:10.429 00:05:02.158 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 00:39:10.426 00:05:02.163 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 00:43:52.964 00:00:10.371 TCP 1.101.0.1:3000 -> 23.104.0.1:37314 12 6556 1 2025-12-04 00:44:53.369 00:00:10.331 TCP 1.101.0.1:3000 -> 23.104.0.1:41478 10 6452 1 2025-12-04 00:45:53.741 00:00:10.368 TCP 1.101.0.1:3000 -> 23.104.0.1:48424 10 6452 1 2025-12-04 00:46:48.954 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:46:48.872 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:46:48.829 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:46:48.497 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:46:48.700 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:46:54.148 00:00:10.367 TCP 1.101.0.1:3000 -> 23.104.0.1:55448 10 6452 1 2025-12-04 00:47:54.552 00:00:10.373 TCP 1.101.0.1:3000 -> 23.104.0.1:52708 10 6452 1 2025-12-04 00:48:54.965 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:39416 10 6452 1 2025-12-04 00:45:10.429 00:05:02.161 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 00:45:10.433 00:05:02.156 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 00:49:55.365 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:49456 10 6452 1 2025-12-04 00:50:55.768 00:00:10.378 TCP 1.101.0.1:3000 -> 23.104.0.1:60956 10 6452 1 2025-12-04 00:51:48.983 00:00:00.023 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:51:48.885 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:51:48.741 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:51:48.936 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:51:48.823 00:00:00.023 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:51:56.186 00:00:10.364 TCP 1.101.0.1:3000 -> 23.104.0.1:35302 10 6452 1 2025-12-04 00:52:56.589 00:00:10.369 TCP 1.101.0.1:3000 -> 23.104.0.1:46238 10 6452 1 2025-12-04 00:53:56.999 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:43522 10 6452 1 2025-12-04 00:51:10.430 00:05:02.162 TCP 179.21.23.23:179 -> 179.21.23.21:38570 12 738 1 2025-12-04 00:54:57.402 00:00:10.365 TCP 1.101.0.1:3000 -> 23.104.0.1:54016 10 6452 1 2025-12-04 00:51:10.433 00:05:02.157 TCP 179.21.23.21:38570 -> 179.21.23.23:179 12 738 1 2025-12-04 00:55:57.804 00:00:10.360 TCP 1.101.0.1:3000 -> 23.104.0.1:52368 10 6452 1 2025-12-04 00:56:49.054 00:00:00.022 ICMP 23.107.0.1:0 -> 21.0.198.2:0.0 3 252 1 2025-12-04 00:56:49.181 00:00:00.022 ICMP 21.0.198.2:0 -> 27.107.0.1:8.0 3 252 1 2025-12-04 00:56:48.897 00:00:00.022 ICMP 1.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:56:48.971 00:00:00.022 ICMP 21.0.198.2:0 -> 23.107.0.1:8.0 3 252 1 2025-12-04 00:56:49.074 00:00:00.022 ICMP 21.0.198.2:0 -> 32.102.0.1:8.0 3 252 1 2025-12-04 00:56:58.209 00:00:10.363 TCP 1.101.0.1:3000 -> 23.104.0.1:40226 10 6452 1 2025-12-04 00:57:58.618 00:00:10.366 TCP 1.101.0.1:3000 -> 23.104.0.1:50046 10 6452 1 Summary: total flows: 139, total bytes: 418596, total packets: 1018, avg bps: 915, avg pps: 0, avg bpp: 411 Time window: 2025-12-03 23:57:10 - 2025-12-04 00:58:08 Total flows processed: 139, passed: 139, Blocks skipped: 0, Bytes read: 14520 Sys: 0.0036s User: 0.0027s Wall: 0.0022s flows/second: 64620.7 Runtime: 0.0022s